Skip to content
Cloudflare API
Start here
API Reference
Cloudforce One
Threat Events
Tags

Creates a new tag

POST/accounts/{account_id}/cloudforce-one/events/tags/create

Creates a new tag to be used accross threat events.

Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
Accepted Permissions (at least one required)
Cloudforce One WriteCloudforce One Read
Path ParametersExpand Collapse
account_id: optional string

Account ID.

Body ParametersJSONExpand Collapse
value: string
activeDuration: optional string
actorCategory: optional string
aliasGroupNames: optional array of string
aliasGroupNamesInternal: optional array of string
analyticPriority: optional number
attributionConfidence: optional string
attributionOrganization: optional string
categoryUuid: optional string
internalDescription: optional string
motive: optional string
opsecLevel: optional string
originCountryISO: optional string
priority: optional number
sophisticationLevel: optional string
ReturnsExpand Collapse
uuid: string
value: string
activeDuration: optional string
actorCategory: optional string
aliasGroupNames: optional array of string
aliasGroupNamesInternal: optional array of string
analyticPriority: optional number
attributionConfidence: optional string
attributionOrganization: optional string
categoryName: optional string
categoryUuid: optional string
internalDescription: optional string
motive: optional string
opsecLevel: optional string
originCountryISO: optional string
priority: optional number
sophisticationLevel: optional string

Creates a new tag

curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/cloudforce-one/events/tags/create \
    -H 'Content-Type: application/json' \
    -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
    -d '{
          "value": "APT28",
          "categoryUuid": "12345678-1234-1234-1234-1234567890ab"
        }'
{
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "value": "APT28",
  "activeDuration": "activeDuration",
  "actorCategory": "actorCategory",
  "aliasGroupNames": [
    "string"
  ],
  "aliasGroupNamesInternal": [
    "string"
  ],
  "analyticPriority": 0,
  "attributionConfidence": "attributionConfidence",
  "attributionOrganization": "attributionOrganization",
  "categoryName": "Nation State",
  "categoryUuid": "12345678-1234-1234-1234-1234567890ab",
  "externalReferenceLinks": [
    "string"
  ],
  "internalDescription": "internalDescription",
  "motive": "motive",
  "opsecLevel": "opsecLevel",
  "originCountryISO": "originCountryISO",
  "priority": 0,
  "sophisticationLevel": "sophisticationLevel"
}
Returns Examples
{
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "value": "APT28",
  "activeDuration": "activeDuration",
  "actorCategory": "actorCategory",
  "aliasGroupNames": [
    "string"
  ],
  "aliasGroupNamesInternal": [
    "string"
  ],
  "analyticPriority": 0,
  "attributionConfidence": "attributionConfidence",
  "attributionOrganization": "attributionOrganization",
  "categoryName": "Nation State",
  "categoryUuid": "12345678-1234-1234-1234-1234567890ab",
  "externalReferenceLinks": [
    "string"
  ],
  "internalDescription": "internalDescription",
  "motive": "motive",
  "opsecLevel": "opsecLevel",
  "originCountryISO": "originCountryISO",
  "priority": 0,
  "sophisticationLevel": "sophisticationLevel"
}